Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

VPN - 3 Interface PIX to 3005

My goal is to make two remote subnets accessable over a VPN connection to the central office. One remote subnet is a DMZ and traffic must be secured to the other remote office and to the central office to and from the DMZ.

2 remote subnets (A and B), each subnet is connected to an ethernet interface on the PIX.

The third ethernet interface on the PIX is connected to the Internet.

One central office with a 3005; Subnet C.

Subnet A is considered friendly.

Subnet B is considered hostile; it is a DMZ

Subnet A requires access to subnet B for access to a shared server.

Subnet B will not initiate connections to Subnet A or Subnet C (head office).

I would like to establish a a VPN Tunnel from the PIX to the 3005 using the ezvpn function if possible.

I would like both remote subnets A & B to be advertised via RIP on the head office LAN thus making subnet A and B accessible from subnet C, head office.

Is this possible?

If not, what devices would work, 1710 router for the VPN and a pix to separate subnet A and B? Would a 3002 for the VPN tunnel and a PIX to separate A and B possibly work?

New Member

Re: VPN - 3 Interface PIX to 3005

3002 is definitely good in this scenario.

CreatePlease login to create content